Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 27 subscribers
  • Views 769 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN SSL - Can't Access NAS - XG135 (SFOS 18.0.3 MR-3)

Glen Turner

I just setup a VPN SSL connection.

I followed the instructions for setting it up .

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/learningContents/CreatingRemoteAccessSSLVPN.html

The only difference is that I used 192.168.56.0 for the local subnet, since my internal network is on that subnet.

I also added a rule LAN,VPN, Any -->LAN,VPN, Any (Because I read that in some online troubleshooting)

Both my rules are at the top of the list.

My NAS has a static IP address at 192.168.56.99.

I am able to connect using the Sophos SSL VPN Client software using MFA and I can see when I check my ipconfig that the address on that Windows 10 Pro machine is  10.81.234.6.

I can also see in the Sophos console under reports-->VPN-->SSL VPN that the user has connected

And under current activities I can see the user and the IP matches (10.81.234.6)

I think I am missing a step, do I have to setup a specific NAT for my NAS? I am trying to access it at the 192.168.100.56 address but that seems wrong, but what address would it be then?



This thread was automatically locked due to age.
Parents
  • 0

    Sometimes, a NAT (MASQ) is needed. Is your XG Firewall your default gateway? If not, try to MASQ the traffic.

    Create a new NAT Rule, choose your filters, as wanted (Source Network your 10.81.234.6 IP Range, Destination Network your NAS) and translate the Source to MASQ.

Reply
  • 0

    Sometimes, a NAT (MASQ) is needed. Is your XG Firewall your default gateway? If not, try to MASQ the traffic.

    Create a new NAT Rule, choose your filters, as wanted (Source Network your 10.81.234.6 IP Range, Destination Network your NAS) and translate the Source to MASQ.

Children
No Data